Flux
Couleur d'accent
Now we have a timeline of the OpenAI accidental attack against Hugging Face
IA Programmation

Now we have a timeline of the OpenAI accidental attack against Hugging Face

OpenAI gave a last-minute presentation at the Black Hat security on Wednesday about "the Hugging Face Incident" (previously on this blog). The video was published yesterday. It's short and information dense and well worth watching, in particular because it provides full details of what happened and how things played out inside OpenAI. I've used the video to construct the timeline below. Here's the timeline. My favourite detail is at the end: OpenAI found out that they were responsible for the…

Simon Willison's Weblog
Moonlight & Mayhem (Raccoon Heist by Codex + GPT-5.6 Sol Ultra)
IA Programmation

Moonlight & Mayhem (Raccoon Heist by Codex + GPT-5.6 Sol Ultra)

Moonlight & Mayhem (Raccoon Heist by Codex + GPT-5.6 Sol Ultra) On Wednesday I wrote about One-shotting a Raccoon Heist game using Claude Fable 5, where I had Claude Fable 5 build a full working game from a premise I generated with GPT-3 and DALL-E four years ago. I decided to pose the exact same prompt to Codex Desktop running GPT-5.6 Sol Ultra - the mode where Sol makes aggressive use of sub-agents - to see how it would do. It produced a much better game! Here's Moonlight & Mayhem -…

Simon Willison's Weblog
Moonlight & Mayhem (Raccoon Heist by Codex + GPT-5.6 Sol Ultra)
IA Programmation

Moonlight & Mayhem (Raccoon Heist by Codex + GPT-5.6 Sol Ultra)

Moonlight & Mayhem (Raccoon Heist by Codex + GPT-5.6 Sol Ultra) On Wednesday I wrote about One-shotting a Raccoon Heist game using Claude Fable 5, where I had Claude Fable 5 build a full working game from a premise I generated with GPT-3 and DALL-E four years ago. I decided to pose the exact same prompt to Codex Desktop running GPT-5.6 Sol Ultra - the mode where Sol makes aggressive use of sub-agents - to see how it would do. It produced a much better game! Here's Moonlight & Mayhem -…

Simon Willison's Weblog
The Tokenpocalypse Is Here: Companies Are Scrambling To Stop Spending So Much on AI
IA Programmation

The Tokenpocalypse Is Here: Companies Are Scrambling To Stop Spending So Much on AI

The Tokenpocalypse Is Here: Companies Are Scrambling To Stop Spending So Much on AI There's a fun anecdote from Accenture (apparently via leaked meeting audio recordings) in this 404 Media piece from June 24th: “We’re seeing from some of the data internally at least that it’s actually not our engineers that are driving the token consumption. It’s a lot of the non-engineers that are doing some of those behaviors [...] you were talking about,” Justice Kwak, Accenture’s agentic AI strategy lead,…

Simon Willison's Weblog
The Tokenpocalypse Is Here: Companies Are Scrambling To Stop Spending So Much on AI
IA Programmation

The Tokenpocalypse Is Here: Companies Are Scrambling To Stop Spending So Much on AI

The Tokenpocalypse Is Here: Companies Are Scrambling To Stop Spending So Much on AI There's a fun anecdote from Accenture (apparently via leaked meeting audio recordings) in this 404 Media piece from June 24th: “We’re seeing from some of the data internally at least that it’s actually not our engineers that are driving the token consumption. It’s a lot of the non-engineers that are doing some of those behaviors [...] you were talking about,” Justice Kwak, Accenture’s agentic AI strategy lead,…

Simon Willison's Weblog
Free Business Plan Upgrades for Open Source Maintainers
Cybersécurité Programmation

Free Business Plan Upgrades for Open Source Maintainers

This week our Threat Research team tracked an active supply chain attack that took over a maintainer account and used it to push malware across the widely used keyv and cacheable packages, then spread to other maintainers through stolen npm tokens. Those packages sit deep in dependency trees and account for tens of millions of weekly downloads. Attacks like this are getting more frequent, and open source maintainers are the ones on the receiving end. When an account takeover happens, the…

Socket
The PHP Podcast 2026.08.06
Programmation Web

The PHP Podcast 2026.08.06

🎙️ PHP Podcast – August 6, 2026 Hosts: Joe Ferguson, Sara Golemon & Holly Schilling A sick kitten steals the show, Sara loses a fight with her smart lights, PHP 8.6 beta is almost here, and the crew argues about roadmaps, deprecations, and why you shouldn’t be a meat proxy. 🐱 Cats, Ice Cream, and […] The post The PHP Podcast 2026.08.06 appeared first on PHP Architect.

PHP Architect
datasette 1.0a38
IA Programmation

datasette 1.0a38

Release: datasette 1.0a38 This release fixes a SQL injection security issue that affects Datasette instances that serve a mixture of public and private tables in the same database, with access configured using the Datasette permissions system. Site administrators who serve private tables in this way are advised to disable the execute-sql permission ` on that database to prevent users from accessing private tables using raw SQL queries. The bug that has been fixed would have allowed users with…

Simon Willison's Weblog
Esc